$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa File: 5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json) Hash identifier: NkQUPo5WOIKE+LFvFmLjZStIPJPp64cjKvDoWEdJWYA= Subject key identifier: 81:68:5E:0D:56:54:03:A2:F7:18:DE:C8:55:65:41:B8:07:A6:98:4B Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584BA39D1BFF292ADA70711F22C0 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399989 IP address blocks: 2607:340::/28 maxlen: 28 2607:340::/29 maxlen: 29 2607:348::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:ff:29:2a:da:70:71:1f:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b15a70b4-e50a-4cd1-a59f-2085788d4c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:a0:19:af:8a:d5:67:86:fd:b5:34:91:7c: e0:6c:e5:7b:bd:a7:8c:8c:c5:87:d2:f6:d9:cd:d7: 4e:bd:14:04:b2:f7:ad:6a:73:31:72:db:e2:e8:b4: 50:ed:e1:ae:bf:22:f2:10:83:62:90:32:fb:ec:eb: ce:85:dd:3c:b1:e5:ab:4c:34:95:05:53:fe:53:8f: 1f:2d:ef:2e:48:6a:aa:6b:09:e0:34:9d:11:51:d9: 81:79:7c:8c:ff:69:8c:5e:fe:18:e7:b9:d2:64:d7: c9:2d:6d:fb:51:b2:46:40:7e:39:47:4a:19:4f:bf: ea:1d:64:fb:a4:47:4f:22:20:e9:74:7c:7d:cd:67: 30:19:a9:db:fb:82:0e:02:1e:6f:ab:dd:06:6c:3f: 63:03:8d:19:cb:ba:ff:ef:40:d0:3a:a8:3e:d8:e7: c5:7e:d7:59:8e:b3:59:4a:c3:fe:37:bd:a9:48:0f: fd:86:15:88:96:cf:11:27:7b:d6:54:62:10:1a:6c: f9:c3:a4:9e:28:45:72:ff:f3:91:54:3d:7f:c2:ff: a3:d9:ed:0b:6a:8f:d5:4b:05:d6:ac:d2:6d:9d:78: fb:9b:2b:98:1c:40:8f:12:5a:4f:ad:c0:68:e8:dc: 03:17:86:ef:eb:b8:71:bb:4d:62:d9:b7:94:2c:f8: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:5E:0D:56:54:03:A2:F7:18:DE:C8:55:65:41:B8:07:A6:98:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:80:8c:8e:86:17:da:c3:f4:1b:3f:d1:38:0c:f0:9a:0e:9a: 45:b8:9a:b0:ff:01:d6:46:bf:a1:17:24:a4:39:f1:c0:9c:2c: c6:1c:d7:da:67:15:8a:ab:ee:db:0d:79:d7:cb:d3:7e:95:26: 80:03:67:70:b2:18:a7:f6:a6:ba:d6:ee:4a:de:0e:6c:4f:1d: 43:89:f3:84:ef:c3:a7:bd:b7:4c:32:a8:fa:00:91:5d:35:20: 98:ad:01:7e:96:1f:4f:31:32:7c:63:24:16:c7:e8:19:92:70: 98:92:55:5d:2f:18:b7:9b:fd:b6:dc:89:80:20:32:18:05:13: 9a:d7:54:6b:79:8c:06:21:bb:43:5a:e4:04:0e:e1:37:11:9a: 67:4a:37:d2:df:0d:0a:5a:35:f4:ac:5c:61:99:4a:26:13:ea: 76:0b:22:58:59:f5:bb:42:60:c9:db:df:ca:7c:5c:65:16:3c: b2:3a:df:88:f9:05:8c:c5:71:85:9a:63:a2:87:82:c8:15:24: 0f:8f:c5:69:92:36:03:8d:34:55:8f:75:17:90:fc:d1:7e:29: 4b:dd:f4:c8:7b:83:e8:31:bb:3f:23:44:ab:24:17:1e:b0:f5: 5c:7c:e5:44:5a:44:96:02:38:2f:47:8e:1c:4a:00:24:28:38: 9b:b0:d9:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEujnRv/KSracHEfIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjE1YTcwYjQtZTUwYS00Y2QxLWE1OWYtMjA4NTc4OGQ0YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdigGa+K1WeG/bU0kXzgbOV7vaeMjMWH0vbZ zddOvRQEsvetanMxctvi6LRQ7eGuvyLyEINikDL77OvOhd08seWrTDSVBVP+U48f Le8uSGqqawngNJ0RUdmBeXyM/2mMXv4Y57nSZNfJLW37UbJGQH45R0oZT7/qHWT7 pEdPIiDpdHx9zWcwGanb+4IOAh5vq90GbD9jA40Zy7r/70DQOqg+2OfFftdZjrNZ SsP+N72pSA/9hhWIls8RJ3vWVGIQGmz5w6SeKEVy//ORVD1/wv+j2e0Lao/VSwXW rNJtnXj7myuYHECPElpPrcBo6NwDF4bv67hxu01i2beULPi0pQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIFoXg1WVAOi9xjeyFVlQbgHpphLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNWFjMGEzZDktYmU5Zi0z NmM5LTliYjktODZkYmM5MjY1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTgIyOhhfaw/QbP9E4DPCaDppFuJqw/wHWRr+hFySkOfHAnCzGHNfa ZxWKq+7bDXnXy9N+lSaAA2dwshin9qa61u5K3g5sTx1DifOE78OnvbdMMqj6AJFd NSCYrQF+lh9PMTJ8YyQWx+gZknCYklVdLxi3m/223ImAIDIYBROa11RreYwGIbtD WuQEDuE3EZpnSjfS3w0KWjX0rFxhmUomE+p2CyJYWfW7QmDJ29/KfFxlFjyyOt+I +QWMxXGFmmOih4LIFSQPj8VpkjYDjTRVj3UXkPzRfilL3fTIe4PoMbs/I0SrJBce sPVcfOVEWkSWAjgvR44cSgAkKDibsNnY -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:48 2025 by rpki-client